ZDI-CAN-21766: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-47058

Summary

Adobe Premiere Pro versions 24.0 and 23.6 are vulnerable to an out-of-bounds read issue that occurs when the software parses specially crafted files. This vulnerability could allow an attacker to read beyond the allocated memory, potentially leading to arbitrary code execution in the context of the currently logged-in user. Successful exploitation necessitates user interaction, as the targeted individual must open a malicious file for the attack to proceed.

References